Elephant Insurance, an auto insurance carrier headquartered in Richmond, VA., has faced a cyber security incident in April.
Elephant Insurance, which provides auto insurance policies in Georgia, Illinois, Indiana, Maryland, Ohio, Tennessee, Texas, and Virginia, is a subsidiary of Admiral Group, a FTSE 100 company and one of the U.K.’s leading insurers.
In April 2022, Elephant Insurance identified unusual activity on its network. Elephant Insurance promptly undertook a comprehensive investigation working with third-party specialists, to secure its systems and to confirm the nature and scope of the incident, as well as any impact to information on its network.
The investigation determined that certain consumer information may have been viewed on or copied from Elephant Insurance’s network between March 26, 2022 and April 1, 2022. Elephant Insurance undertook a comprehensive review to determine what information was impacted and to whom it related. On April 25, 2022, the review identified the individuals whose information was in the affected data.
The investigation determined that the affected information includes name, driver’s license number, and date of birth.
Elephant Insurance reported the incident to federal law enforcement and is notifying appropriate state regulatory agencies. Elephant Insurance is reviewing and enhancing existing safeguards and procedures.
The IT team of Elephant Insurance is taking steps to notify individuals and provide them with information and resources, including access to credit monitoring services, that they may use to help protect information.
